AWS Security Finding Format (ASFF) Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Threat Detection Services

What you'll be asked

  1. What is the primary purpose of the AWS Security Finding Format (ASFF)?
  2. In an ASFF JSON object, which field is used to represent the severity of a finding based on a normalized scale of 0 to 100?
  3. Which of the following fields in the ASFF is mandatory for every finding to be successfully ingested by AWS Security Hub?
  4. If you are writing a custom integration to import findings into Security Hub, what must you ensure regarding the 'ProductArn' field?
  5. A security engineer is mapping a finding from a custom firewall to ASFF. If the finding relates to a specific network connection, which ASFF object is best suited to store the source and destination IP addresses?

Answers and explanations come after you submit.